Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/E6Vgg_EG3-o4kevAX6JsBhsSEx0.roa
File: E6Vgg_EG3-o4kevAX6JsBhsSEx0.roa (raw, json)
Hash identifier: B1nxVpndBldSwileez5MLRGWyQx07Ng0uk8WghFVI3c=
Subject key identifier: 13:A5:60:83:F1:06:DF:EA:38:91:EB:C0:5F:A2:6C:06:1B:12:13:1D
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0199158A3897E7B3057AA6C8B036878F3452
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/E6Vgg_EG3-o4kevAX6JsBhsSEx0.roa
Signing time: Thu 04 Sep 2025 16:23:23 +0000
ROA not before: Thu 04 Sep 2025 16:23:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.147.194.0/24 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Sep 2025 16:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:8a:38:97:e7:b3:05:7a:a6:c8:b0:36:87:8f:34:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Sep 4 16:23:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13a56083f106dfea3891ebc05fa26c061b12131d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:8c:7c:c0:e4:24:b6:32:c7:3c:e2:1e:0d:
ff:05:bc:9a:3b:b9:4c:1b:9a:0e:82:3a:df:f5:86:
f7:47:4b:2d:04:74:a9:49:1d:32:47:35:ec:1b:76:
1e:f8:f1:aa:37:6f:5d:9f:4e:b8:ce:eb:1a:94:b5:
e6:ec:ab:2f:84:f1:f5:5b:3b:a5:a0:bb:8e:71:51:
50:74:46:3f:e2:7f:92:42:bd:26:df:02:14:78:02:
a9:57:ed:0e:ab:b0:da:c6:e8:b6:32:d4:4c:18:8f:
53:d1:3f:aa:81:9d:c5:bb:9a:d6:55:b4:62:5e:94:
59:e8:cb:e8:a6:70:51:f3:49:bb:50:a9:bf:1e:3f:
83:23:fb:84:66:73:bd:9b:87:97:73:05:57:d6:a1:
7d:fb:33:c1:5c:90:0a:5b:c7:52:ee:61:97:0e:d4:
9d:0b:37:a3:e6:81:d0:6d:e4:8e:c0:1f:d9:54:74:
c7:17:6d:7b:99:06:31:d0:55:17:44:e6:ff:93:eb:
89:68:39:39:5e:91:20:f0:48:5e:ce:e6:cb:d5:0c:
fd:12:43:cb:09:1d:83:39:28:32:0a:fc:ac:6e:60:
f1:71:a9:e2:2a:0c:fd:03:2d:f0:ec:12:67:30:ac:
54:38:57:a0:3a:77:dd:80:63:e4:ca:50:ce:8f:14:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A5:60:83:F1:06:DF:EA:38:91:EB:C0:5F:A2:6C:06:1B:12:13:1D
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/E6Vgg_EG3-o4kevAX6JsBhsSEx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.194.0/24
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
26:01:03:96:2e:66:e1:99:dd:06:52:13:e4:9f:a2:0b:69:0e:
95:bf:30:06:67:ed:9a:2a:14:f1:df:f8:90:41:3a:f7:f3:b7:
32:32:3c:c6:de:e6:53:01:ff:03:de:b2:d9:7f:ce:ae:dc:f8:
8d:d3:e8:4d:09:69:9c:4d:27:4b:0a:4b:7c:3b:2f:dc:e4:5e:
52:9d:f2:c0:59:2c:74:d3:f6:a9:2e:0f:52:b7:a0:0d:f8:c0:
39:90:aa:a5:af:a1:37:14:8d:f8:ce:28:b9:f0:6b:6e:3c:3a:
51:27:c5:d1:b7:93:c2:8b:fe:0b:c7:bb:ac:92:1b:54:22:54:
a1:f4:62:ae:99:79:75:ba:eb:8b:c9:12:b8:4d:77:9d:6a:07:
65:e6:cc:e8:65:c0:bf:15:43:74:76:0b:7a:da:38:cc:b4:f4:
cf:98:10:bc:8e:eb:8c:6e:a7:8d:fd:d6:7b:f7:4f:bf:83:1f:
0e:bf:37:18:aa:ef:a7:3c:44:78:1c:5c:ab:b3:f6:af:f2:ab:
34:3c:2c:7a:73:47:e2:29:10:35:0c:29:77:6d:a1:c6:f7:a6:
30:ff:5a:ba:78:fb:87:7c:36:c7:7f:59:ea:b6:b0:af:ac:62:
47:da:eb:4b:63:1c:35:54:a8:d4:b3:eb:a9:c7:4b:cb:1f:70:
a7:69:80:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 17:01:52 2025 by rpki-client